Digital Forensics Ch1-2

The triad of computing security includes which of the following?

• Vulnerability assessment, intrusion response, and monitoring

• Vulnerability/threat assessment and risk management, network intrusion detection and incident response, and digital investigation

• Vulnerability assessment, detection, and monitoring

• Detection, response, and monitoring

Digital forensics and data recovery refer to the same activities. True or False?

• True

• False

Criminal proceedings in the United States must use procedures that adhere to which of the following?

• Fourth Amendment

• First Amendment

• None of these choices

• Third Amendment

Policies can address rules for which of the following?

• All of these choices

• The amount of personal email you can send

• The Internet sites you can or can't access

• When you can log on to a company network from home

A warning banner should contain information about ____________. (Choose all that apply.)

• who owns the computer

• who can use the site

• the content of websites

• consequences of misuse

Under normal circumstances, a private-sector investigator is considered an agent of law enforcement. True or False?

• True

• False

When collecting computer components as evidence, you should place them in antistatic bags. True or False?

• True

• False

What term do you use to refer to all the people who have had physical possession of the evidence?

• Legal custody

• Physical tracking

• Professional investigators

• Chain of custody

Data collected before an attorney issues a memo for an attorney-client privilege case is protected under the confidential work product rule. True or False?

• True

• False

Which of the following rules or laws requires an expert to prepare and submit a report?

• FRE 801

• Both

• Neither

• FRCP 26